CVE-2013-7440
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
5.9
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
CVE-2013-7440- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-19
- Updated
- 2026-11-02
CVE List No score
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
CVE-2013-7440- Updated
- 2026-11-02
EUVDEUVD-2013-7204 No score
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
EUVD-2013-7204- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v6fx-m8cj-52v3
5.9
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
GHSA-v6fx-m8cj-52v3- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVAZL-109599
5.9
CVE-2013-7440 affecting package python-py 1.11.0-1
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
AZL-109599- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSV
5.9
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
CVE-2013-7440- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2013-7440
5.9
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
DEBIAN-CVE-2013-7440- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVPSF-2016-1 No score
ssl.match_hostname() IDNA issue
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
- Record
PSF-2016-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1298-1 No score
Security update for python-setuptools
the following issue was fixed by this update: Non-RFC6125-compliant host name matching was incorrect (CVE-2013-7440 bnc#930189)
- Record
SUSE-SU-2015:1298-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1651-1 No score
Recommended update for python-setuptools
python-setuptools was updated to fix one security issue.
The following vulnerability was fixed:
- CVE-2013-7440: Non-RFC6125-compliant host name matching was incorrect (bsc#930189)
- Record
SUSE-SU-2015:1651-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.7Debian:11 |
before 2.7.9-1 | 2.7.9-1 |
libmongodbRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodbRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodb-debuginfoRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodb-serverRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
libmongodbRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodbRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodb-debuginfoRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
mongodb-serverRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:2.4.6-2.el6sat | 0:2.4.6-2.el6sat |
Show 118 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mongodbRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
mongodb-debuginfoRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
mongodb-serverRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
mongodbRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
mongodb-debuginfoRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
mongodb-serverRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:2.4.9-3.el7sat | 0:2.4.9-3.el7sat |
katelloRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.5.0-30.el6sat | 0:1.5.0-30.el6sat |
katelloRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.5.0-30.el7sat | 0:1.5.0-30.el7sat |
foremanRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-computeRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-gceRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-libvirtRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-ovirtRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-postgresqlRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foreman-vmwareRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el6sat | 0:1.6.0.44-1.el6sat |
foremanRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-computeRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-gceRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-libvirtRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-ovirtRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-postgresqlRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
foreman-vmwareRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.44-1.el7sat | 0:1.6.0.44-1.el7sat |
v8Red Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 1:3.14.5.10-9.el6sat | 1:3.14.5.10-9.el6sat |
v8-debuginfoRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 1:3.14.5.10-9.el6sat | 1:3.14.5.10-9.el6sat |
v8Red Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 1:3.14.5.10-9.el6sat | 1:3.14.5.10-9.el6sat |
v8-debuginfoRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 1:3.14.5.10-9.el6sat | 1:3.14.5.10-9.el6sat |
v8Red Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 1:3.14.5.10-11.el7sat | 1:3.14.5.10-11.el7sat |
v8-debuginfoRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 1:3.14.5.10-11.el7sat | 1:3.14.5.10-11.el7sat |
v8Red Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 1:3.14.5.10-11.el7sat | 1:3.14.5.10-11.el7sat |
v8-debuginfoRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 1:3.14.5.10-11.el7sat | 1:3.14.5.10-11.el7sat |
python-httplib2Red Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.7.2-1.el6 | 0:0.7.2-1.el6 |
python-httplib2Red Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.7.2-1.el6 | 0:0.7.2-1.el6 |
python-httplib2Red Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.6.0-6.el7sat | 0:0.6.0-6.el7sat |
python-httplib2Red Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.6.0-6.el7sat | 0:0.6.0-6.el7sat |
foreman-proxyRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.30-1.el6sat | 0:1.6.0.30-1.el6sat |
foreman-proxyRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:1.6.0.30-1.el6sat | 0:1.6.0.30-1.el6sat |
foreman-proxyRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.30-1.el7sat | 0:1.6.0.30-1.el7sat |
foreman-proxyRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:1.6.0.30-1.el7sat | 0:1.6.0.30-1.el7sat |
rubygem-kafoRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.6.4-2.el6sat | 0:0.6.4-2.el6sat |
rubygem-kafo_parsersRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.0.3-2.el6sat | 0:0.0.3-2.el6sat |
rubygem-kafoRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.6.4-2.el6sat | 0:0.6.4-2.el6sat |
rubygem-kafo_parsersRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.0.3-2.el6sat | 0:0.0.3-2.el6sat |
rubygem-kafoRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.6.4-2.el7sat | 0:0.6.4-2.el7sat |
rubygem-kafo_parsersRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.0.3-2.el7sat | 0:0.0.3-2.el7sat |
rubygem-kafoRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.6.4-2.el7sat | 0:0.6.4-2.el7sat |
rubygem-kafo_parsersRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.0.3-2.el7sat | 0:0.0.3-2.el7sat |
rubygem-hammer_cli_foremanRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.1.1-16.el6sat | 0:0.1.1-16.el6sat |
rubygem-hammer_cli_foreman_tasksRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.0.3-3.el6sat | 0:0.0.3-3.el6sat |
rubygem-hammer_cli_foremanRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.1.1-16.el7sat | 0:0.1.1-16.el7sat |
rubygem-hammer_cli_foreman_tasksRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.0.3-3.el7sat | 0:0.0.3-3.el7sat |
python-anyjsonRed Hat:satellite_capsule:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.3.3-4.el6sat | 0:0.3.3-4.el6sat |
python-anyjsonRed Hat:satellite:6.0::el6 From an advisory covering 24 CVEs |
before 0:0.3.3-4.el6sat | 0:0.3.3-4.el6sat |
python-anyjsonRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.3.3-5.el7sat | 0:0.3.3-5.el7sat |
python-simplejsonRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python-simplejson-debuginfoRed Hat:satellite_capsule:6.0::el7 From an advisory covering 24 CVEs |
before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python-anyjsonRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:0.3.3-5.el7sat | 0:0.3.3-5.el7sat |
python-simplejsonRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python-simplejson-debuginfoRed Hat:satellite:6.0::el7 From an advisory covering 24 CVEs |
before 0:3.2.0-1.el7sat | 0:3.2.0-1.el7sat |
python27Red Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:1.1-25.el6 | 0:1.1-25.el6 |
python27-PyYAMLRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.10-14.el6 | 0:3.10-14.el6 |
python27-PyYAML-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.10-14.el6 | 0:3.10-14.el6 |
python27-numpyRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el6 | 1:1.7.1-10.el6 |
python27-numpy-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el6 | 1:1.7.1-10.el6 |
python27-numpy-f2pyRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el6 | 1:1.7.1-10.el6 |
python27-pythonRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-bsonRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el6 | 0:3.2.1-1.el6 |
python27-python-debugRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-develRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-docutilsRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:0.11-2.el6 | 0:0.11-2.el6 |
python27-python-libsRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-pipRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:7.1.0-2.el6 | 0:7.1.0-2.el6 |
python27-python-pymongoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el6 | 0:3.2.1-1.el6 |
python27-python-pymongo-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el6 | 0:3.2.1-1.el6 |
python27-python-pymongo-docRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el6 | 0:3.2.1-1.el6 |
python27-python-pymongo-gridfsRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el6 | 0:3.2.1-1.el6 |
python27-python-testRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-toolsRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27-python-virtualenvRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:13.1.0-1.el6 | 0:13.1.0-1.el6 |
python27-runtimeRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:1.1-25.el6 | 0:1.1-25.el6 |
python27-scipyRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:0.12.1-3.el6 | 0:0.12.1-3.el6 |
python27-scipy-debuginfoRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:0.12.1-3.el6 | 0:0.12.1-3.el6 |
python27-scldevelRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:1.1-25.el6 | 0:1.1-25.el6 |
python27-tkinterRed Hat:rhel_software_collections:2::el6 From an advisory covering 2 CVEs |
before 0:2.7.8-16.el6 | 0:2.7.8-16.el6 |
python27Red Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:1.1-25.el7 | 0:1.1-25.el7 |
python27-PyYAMLRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.10-14.el7 | 0:3.10-14.el7 |
python27-PyYAML-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.10-14.el7 | 0:3.10-14.el7 |
python27-numpyRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el7 | 1:1.7.1-10.el7 |
python27-numpy-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el7 | 1:1.7.1-10.el7 |
python27-numpy-f2pyRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 1:1.7.1-10.el7 | 1:1.7.1-10.el7 |
python27-pythonRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-bsonRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
python27-python-debugRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-develRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-libsRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-pipRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:7.1.0-2.el7 | 0:7.1.0-2.el7 |
python27-python-pymongoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
python27-python-pymongo-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
python27-python-pymongo-docRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
python27-python-pymongo-gridfsRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
python27-python-testRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-toolsRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python27-python-virtualenvRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:13.1.0-1.el7 | 0:13.1.0-1.el7 |
python27-runtimeRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:1.1-25.el7 | 0:1.1-25.el7 |
python27-scipyRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:0.12.1-4.el7 | 0:0.12.1-4.el7 |
python27-scipy-debuginfoRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:0.12.1-4.el7 | 0:0.12.1-4.el7 |
python27-scldevelRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:1.1-25.el7 | 0:1.1-25.el7 |
python27-tkinterRed Hat:rhel_software_collections:2::el7 From an advisory covering 2 CVEs |
before 0:2.7.8-14.el7 | 0:2.7.8-14.el7 |
python-setuptoolsSUSE:Linux Enterprise Module for Containers 12 |
before 1.1.7-7.1 | 1.1.7-7.1 |
python-setuptoolsSUSE:Linux Enterprise Module for Public Cloud 12 |
before 1.1.7-7.1 | 1.1.7-7.1 |
python-setuptoolsSUSE:Linux Enterprise Software Development Kit 12 |
before 1.1.7-7.1 | 1.1.7-7.1 |
python-setuptoolsSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 |
before 1.1.7-7.1 | 1.1.7-7.1 |
python-setuptoolsSUSE:Enterprise Storage 1.0 |
before 1.1.7-7.1 | 1.1.7-7.1 |
python-setuptoolsSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 0.6c11-6.1 | 0.6c11-6.1 |
python-setuptoolsSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 0.6c11-6.1 | 0.6c11-6.1 |
python-setuptoolsSUSE:Linux Enterprise Desktop 11 SP3 |
before 0.6c11-6.1 | 0.6c11-6.1 |
python-setuptoolsSUSE:Linux Enterprise Desktop 11 SP4 |
before 0.6c11-6.1 | 0.6c11-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7440 is a medium vulnerability (CVSS 5.9) in Python, published June 22, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.88%, the 79th percentile. Fixed in python2.7 2.7.9-1.
References
seclists.org/oss-sec/2015/q2/483
access.redhat.com/errata/RHSA-2016:1166
bugzilla.redhat.com/show_bug.cgi?id=1224999
hg.python.org/cpython/rev/10d0edadbcdd
bugs.python.org/issue17997
securityfocus.com/bid/74707
Show 124 moreShow less
seclists.org/oss-sec/2015/q2/523
nvd.nist.gov/vuln/detail/CVE-2013-7440
github.com/advisories/GHSA-v6fx-m8cj-52v3
security-tracker.debian.org/tracker/CVE-2013-7440
tools.ietf.org/html/rfc6125
access.redhat.com/errata/RHEA-2014:1175
access.redhat.com/site/documentation
access.redhat.com/documentation/en-US/Red_Hat_Satellite
bugzilla.redhat.com/show_bug.cgi?id=1131602
security.access.redhat.com/data/csaf/v2/advisories/2014/rhea-2014_1175.json
access.redhat.com/security/cve/CVE-2012-6619
bugzilla.redhat.com/show_bug.cgi?id=1049748
cve.org/CVERecord?id=CVE-2012-6619
nvd.nist.gov/vuln/detail/CVE-2012-6619
access.redhat.com/security/cve/CVE-2013-2101
bugzilla.redhat.com/show_bug.cgi?id=963568
cve.org/CVERecord?id=CVE-2013-2101
nvd.nist.gov/vuln/detail/CVE-2013-2101
access.redhat.com/security/cve/CVE-2013-2121
bugzilla.redhat.com/show_bug.cgi?id=968166
cve.org/CVERecord?id=CVE-2013-2121
nvd.nist.gov/vuln/detail/CVE-2013-2121
access.redhat.com/security/cve/CVE-2013-2882
bugzilla.redhat.com/show_bug.cgi?id=991116
cve.org/CVERecord?id=CVE-2013-2882
nvd.nist.gov/vuln/detail/CVE-2013-2882
access.redhat.com/security/cve/CVE-2013-4180
bugzilla.redhat.com/show_bug.cgi?id=989755
cve.org/CVERecord?id=CVE-2013-4180
nvd.nist.gov/vuln/detail/CVE-2013-4180
access.redhat.com/security/cve/CVE-2013-4182
bugzilla.redhat.com/show_bug.cgi?id=990374
cve.org/CVERecord?id=CVE-2013-4182
nvd.nist.gov/vuln/detail/CVE-2013-4182
access.redhat.com/security/cve/CVE-2013-4201
bugzilla.redhat.com/show_bug.cgi?id=991318
cve.org/CVERecord?id=CVE-2013-4201
nvd.nist.gov/vuln/detail/CVE-2013-4201
access.redhat.com/security/cve/CVE-2013-4225
bugzilla.redhat.com/show_bug.cgi?id=997639
cve.org/CVERecord?id=CVE-2013-4225
nvd.nist.gov/vuln/detail/CVE-2013-4225
access.redhat.com/security/cve/CVE-2013-4386
bugzilla.redhat.com/show_bug.cgi?id=1013076
cve.org/CVERecord?id=CVE-2013-4386
nvd.nist.gov/vuln/detail/CVE-2013-4386
access.redhat.com/security/cve/CVE-2013-6639
bugzilla.redhat.com/show_bug.cgi?id=1039888
cve.org/CVERecord?id=CVE-2013-6639
nvd.nist.gov/vuln/detail/CVE-2013-6639
access.redhat.com/security/cve/CVE-2013-6640
bugzilla.redhat.com/show_bug.cgi?id=1039889
cve.org/CVERecord?id=CVE-2013-6640
nvd.nist.gov/vuln/detail/CVE-2013-6640
access.redhat.com/security/cve/CVE-2013-6650
bugzilla.redhat.com/show_bug.cgi?id=1059070
cve.org/CVERecord?id=CVE-2013-6650
nvd.nist.gov/vuln/detail/CVE-2013-6650
access.redhat.com/security/cve/CVE-2013-7440
cve.org/CVERecord?id=CVE-2013-7440
access.redhat.com/security/cve/CVE-2014-0007
bugzilla.redhat.com/show_bug.cgi?id=1105369
cve.org/CVERecord?id=CVE-2014-0007
nvd.nist.gov/vuln/detail/CVE-2014-0007
access.redhat.com/security/cve/CVE-2014-0089
bugzilla.redhat.com/show_bug.cgi?id=1071741
cve.org/CVERecord?id=CVE-2014-0089
nvd.nist.gov/vuln/detail/CVE-2014-0089
access.redhat.com/security/cve/CVE-2014-0090
bugzilla.redhat.com/show_bug.cgi?id=1072151
cve.org/CVERecord?id=CVE-2014-0090
nvd.nist.gov/vuln/detail/CVE-2014-0090
access.redhat.com/security/cve/CVE-2014-0091
bugzilla.redhat.com/show_bug.cgi?id=1072738
cve.org/CVERecord?id=CVE-2014-0091
nvd.nist.gov/vuln/detail/CVE-2014-0091
access.redhat.com/security/cve/CVE-2014-0135
bugzilla.redhat.com/show_bug.cgi?id=1076335
cve.org/CVERecord?id=CVE-2014-0135
nvd.nist.gov/vuln/detail/CVE-2014-0135
access.redhat.com/security/cve/CVE-2014-0192
bugzilla.redhat.com/show_bug.cgi?id=1092354
cve.org/CVERecord?id=CVE-2014-0192
nvd.nist.gov/vuln/detail/CVE-2014-0192
access.redhat.com/security/cve/CVE-2014-0208
bugzilla.redhat.com/show_bug.cgi?id=1094642
cve.org/CVERecord?id=CVE-2014-0208
nvd.nist.gov/vuln/detail/CVE-2014-0208
access.redhat.com/security/cve/CVE-2014-0241
bugzilla.redhat.com/show_bug.cgi?id=1099419
cve.org/CVERecord?id=CVE-2014-0241
nvd.nist.gov/vuln/detail/CVE-2014-0241
access.redhat.com/security/cve/CVE-2014-1704
bugzilla.redhat.com/show_bug.cgi?id=1077136
cve.org/CVERecord?id=CVE-2014-1704
nvd.nist.gov/vuln/detail/CVE-2014-1704
access.redhat.com/security/cve/CVE-2014-3531
bugzilla.redhat.com/show_bug.cgi?id=1108745
cve.org/CVERecord?id=CVE-2014-3531
nvd.nist.gov/vuln/detail/CVE-2014-3531
access.redhat.com/security/cve/CVE-2014-4616
bugzilla.redhat.com/show_bug.cgi?id=1112285
cve.org/CVERecord?id=CVE-2014-4616
nvd.nist.gov/vuln/detail/CVE-2014-4616
access.redhat.com/security/updates/classification
access.redhat.com/articles/2039753
bugzilla.redhat.com/show_bug.cgi?id=963260
bugzilla.redhat.com/show_bug.cgi?id=1173041
bugzilla.redhat.com/show_bug.cgi?id=1266529
bugzilla.redhat.com/show_bug.cgi?id=1297783
bugzilla.redhat.com/show_bug.cgi?id=1297784
bugzilla.redhat.com/show_bug.cgi?id=1318319
bugzilla.redhat.com/show_bug.cgi?id=1329141
bugzilla.redhat.com/show_bug.cgi?id=1329944
bugzilla.redhat.com/show_bug.cgi?id=1330041
bugzilla.redhat.com/show_bug.cgi?id=1334447
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1166.json
access.redhat.com/security/cve/CVE-2013-2099
cve.org/CVERecord?id=CVE-2013-2099
nvd.nist.gov/vuln/detail/CVE-2013-2099
suse.com/support/update/announcement/2015/suse-su-20151298-1
bugzilla.suse.com/930189
suse.com/security/cve/CVE-2013-7440
suse.com/support/update/announcement/2015/suse-su-20151651-1